CVE-2021-40941

Name of the Vulnerable Software and Affected Versions Bento4 version 1.6.0-638

Description The issue is related to an allocator running out of memory in the AP4 Array<AP4 TrunAtom::Entry>::EnsureCapacity function, located in Ap4Array.h:172. This can cause a denial of service (DOS), as demonstrated by GPAC.

Recommendations For Bento4 version 1.6.0-638, consider applying a patch or fix to resolve the memory allocation issue in the AP4 Array<AP4 TrunAtom::Entry>::EnsureCapacity function to prevent denial of service attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.